splint ("secure programming lint") is a lint implementation, i.e. a tool for statically checking C programs for security vulnerabilities and coding mistakes. With minimal effort, Splint can be used as a better lint. If additional effort is invested adding annotations to programs, Splint can perform stronger checking than can be done by any standard lint.
Questions tagged [splint]
84 questions
0
votes
1 answer
Splint static analyser: not finding splint.rc configuration file (Windows)
According the Splint FAQ:
For Win32, Splint looks for splint.rc instead of .splintrc due to the
DOS filename limitations. It will look first in the current directory,
then in your home directory.
I've set up a very simple test to try to get…
Jodes
- 14,118
- 26
- 97
- 156
0
votes
1 answer
How to use splint under linux with mingw
I run debian linux actual stable with splint and mingw installed.
I want to check my c code (which I need to compile with mingw, sorry) by splint. Simply adding the mingw-includes is not enough to run. I tried with defining GNU and i686 - but I'm…
Bastian Ebeling
- 1,138
- 11
- 38
0
votes
1 answer
Splint funny error message
I am running splint on a piece of C code and it gave me the following statement:
jmptable.c:34:5: Implicitly only storage vm->jumptable (type struct
jumptable_entry **) not released before assignment:
vm->jumptable = (struct…
Ferenc Deak
- 34,348
- 17
- 99
- 167
0
votes
1 answer
C90 Cast to underlying abstract type
A logging structure that depends on logging related functions looks like this:
typedef struct
{
TFkt_vlogf vlogf;
TFkt_outf outf;
void* logData;
} TLogger;
In this logging function there is an abstract logData that is assigned with…
Johannes
- 6,490
- 10
- 59
- 108
0
votes
3 answers
Taint Analysis for C
I need to perform static taint analysis on my C program. I tried using Splint, no luck. Are there any other open source or freeware tools that are available to perform taint analysis?
If yes, can you please also mention about the way to use it or…
Romaan
- 2,645
- 5
- 32
- 63
-1
votes
1 answer
Running Splint on C Project | Include Problems & Running on a Complete Project
I'm trying to run Splint to analyze a C repo (in this case the source code for the sudo command) but cannot get Splint to find the headers for a single file on its own. In this case, there is a generated header file "config.h" which is in the root…
-1
votes
1 answer
How to resolve a Splint Parse Error for `int32 l[2]`
I have some C code that includes a header for a propriety legacy application. I cannot modify the header. I'm receiving a splint Parse Error for the following code:
#if defined(HAS_LONGLONG)
/* removed for brevity */
#elif defined(HAS_INT64)
…
Matthew Moisen
- 16,701
- 27
- 128
- 231
-3
votes
2 answers
Remove security flaws in my code with help of splint
Can anybody help me to fix this code? I don't understand much as I'm new to C. I'm using Splint to find security flaws in the code.
char *stringcopy(char *str1, char *str2)
{
while (*str2)
*str1++ = *str2++;
return str2;
}
main(int…
Per Kristian Gravdal
- 57
- 5
-4
votes
1 answer
How to use splint on Linux Ubuntu for C programs?
I know splint is to issue warning messages about problems in C programs.
I installed it on my Ubuntu using 'sudo apt-get install splint'.
How do I use it on a C program or programs?
Pradeep Ch
- 103
- 3
- 11